CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2011-0385

Cisco CVE-2011-0385 affects Cisco TelePresence Recording Server (1.6.x) and Cisco TelePresence Multipoint Switch (CTMS) (1.0.x, 1.1.x, 1.5.x, 1.6.x). The flaw is an unauthenticated arbitrary file upload via the administrative web interface, allowing an attacker to place or overwrite files and pot...

CVE-2011-0389

CVE-2011-0389 is a vulnerability in Cisco TelePresence Multipoint Switch (CTMS) devices affecting software 1.0.x, 1.1.x, 1.5.x and 1.6.x. A remote, unauthenticated attacker can crash the call control process by sending a crafted RTCP UDP packet, causing a denial of service. The Cisco advisory and...

CVE-2011-0390

CVE-2011-0390 affects Cisco TelePresence Multipoint Switch (CTMS). A remote, unauthenticated attacker can crash the call-geometry process by sending a crafted XML-RPC request to the device (TCP port 9000), causing a denial of service. Affected software versions include CTMS 1.0.x, 1.1.x, 1.5.x, 1...

CVE-2011-0384

CVE-2011-0384 impacts Cisco TelePresence Multipoint Switch (CTMS) software 1.0.x, 1.1.x, 1.5.x, 1.6.x. The vulnerability arises from the Java Servlet framework not requiring administrative authentication for certain actions, enabling a remote attacker to execute arbitrary code via a crafted reque...

CVE-2011-0383

CVE-2011-0383 describes unauthenticated remote code execution via crafted requests in the Java Servlet framework of Cisco TelePresence Recording Server (software 1.6.x before 1.6.2) and Cisco TelePresence Multipoint Switch (CTMS) devices (software 1.0.x, 1.1.x, 1.5.x, 1.6.x). The root cause is in...

CVE-2011-0387

Cisco TelePresence Multipoint Switch (CTMS) is affected by CVE-2011-0387, tied to Unauthenticated Servlet Access in the administrative web interface. Cisco’s advisory indicates CTMS releases prior to 1.7.1 (covering 1.0.x, 1.1.x, 1.5.x, 1.6.x) are vulnerable. The issue allows a remote, authentica...